keychain should only ever launch ssh agents